# CVE-2024-56116
# Suggested description
A Cross-Site Request Forgery vulnerability in Amiro.CMS before 7.8.4 allows remote attackers to create an administrator account.
# Vulnerability Type
CWE-352 | Cross-Site Request Forgery (CSRF)
# Vendor of Product
Amiro.CMS (https://www.amiro.ru)
# Affected Product Code Base
Amiro.CMS – 7.8.4 and earlier
# Impact Escalation of Privileges
True
# Has vendor confirmed or acknowledged the vulnerability?
True
# Discoverer
Compliance Control Team
# Reference
https://www.amiro.ru
登录后查看神龙缓存的 POC 文件快照
登录查看